diff --git a/.github/workflows/windows-cygwin.yml b/.github/workflows/windows-cygwin.yml
index 6c467fc0bd..96715740e2 100644
--- a/.github/workflows/windows-cygwin.yml
+++ b/.github/workflows/windows-cygwin.yml
@@ -65,11 +65,11 @@ jobs:
         shell: C:\cygwin\bin\bash.EXE --noprofile --norc -e -o pipefail -o igncr   {0}
         run: |
           bash ./sapi/scripts/cygwin/install-re2c.sh
-          bash sapi/download-box/download-box-get-archive-from-server.sh
 
       - name: install deps lib with source code
         shell: C:\cygwin\bin\bash.EXE --noprofile --norc -e -o pipefail -o igncr   {0}
         run: |
+          bash sapi/download-box/download-box-get-archive-from-server.sh
           bash ./sapi/scripts/msys2/install-libzip.sh
           bash ./sapi/scripts/msys2/install-libyuv.sh
           bash ./sapi/scripts/msys2/install-libavif.sh
diff --git a/.github/workflows/windows-msys2.yml b/.github/workflows/windows-msys2.yml
index 82bbdb0118..0d9fedfe42 100644
--- a/.github/workflows/windows-msys2.yml
+++ b/.github/workflows/windows-msys2.yml
@@ -52,6 +52,7 @@ jobs:
       - name: install deps lib with source code
         shell: msys2 {0}
         run: |
+          bash sapi/download-box/download-box-get-archive-from-server.sh
           bash ./sapi/scripts/msys2/install-deps-lib.sh
 
       - name: Prepare
diff --git a/sapi/scripts/msys2/install-libsodium.sh b/sapi/scripts/msys2/install-libsodium.sh
index b8073ad49e..8ee686e1b9 100644
--- a/sapi/scripts/msys2/install-libsodium.sh
+++ b/sapi/scripts/msys2/install-libsodium.sh
@@ -14,7 +14,7 @@ mkdir -p pool/lib/
 WORK_TEMP_DIR=${__PROJECT__}/var/msys2-build/
 mkdir -p ${WORK_TEMP_DIR}
 
-VERSION=1.0.18
+VERSION=1.0.21
 
 download() {
   # document https://doc.libsodium.org/